674d1a8fc480f30a7b256da3fd8512844a12029aca9d83eafe6a780b1f9c365f | Triage

Sharing

General

Target

674d1a8fc480f30a7b256da3fd8512844a12029aca9d83eafe6a780b1f9c365fN
Size

200KB
Sample

240920-rt4rns1dne
MD5

2cc46babc5e30f5c98ae61a21cfdff80
SHA1

73ae2a8735095357c7f78eeda5ee41b8651b77f7
SHA256

674d1a8fc480f30a7b256da3fd8512844a12029aca9d83eafe6a780b1f9c365f
SHA512

81f47aedc9b22a9b0b2849494ec8030a9169307850c0539a1f74a30c62dba56f232437eafebd8d4b2874d3fecd350f95f140d33d2ee29b735bf58dc88499c36c
SSDEEP

3072:BvEfVUzSLhIVbV6i5LirrlxrHyrUHUckoMQ2AN6B9O:BvEN2U+T6i5Lirrl9Hy4HUcMQn6K

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  674d1a8fc480f30a7b256da3fd8512844a12029aca9d83eafe6a780b1f9c365fN
- Size
  
  200KB
- MD5
  
  2cc46babc5e30f5c98ae61a21cfdff80
- SHA1
  
  73ae2a8735095357c7f78eeda5ee41b8651b77f7
- SHA256
  
  674d1a8fc480f30a7b256da3fd8512844a12029aca9d83eafe6a780b1f9c365f
- SHA512
  
  81f47aedc9b22a9b0b2849494ec8030a9169307850c0539a1f74a30c62dba56f232437eafebd8d4b2874d3fecd350f95f140d33d2ee29b735bf58dc88499c36c
- SSDEEP
  
  3072:BvEfVUzSLhIVbV6i5LirrlxrHyrUHUckoMQ2AN6B9O:BvEN2U+T6i5Lirrl9Hy4HUcMQn6K
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence